Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: gN7/ma7kx33wj9McRxcaIMuuqQ+v/M7JsttF2EasupY=
Subject key identifier: BA:AC:26:0E:4E:74:54:0C:0E:EC:F3:92:C6:16:40:64:4E:0A:13:5F
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019A4E4F45D2473E9B41AE482090E778F87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0DC3
Signing time: Tue 04 Nov 2025 10:00:09 +0000
Manifest this update: Tue 04 Nov 2025 10:00:09 +0000
Manifest next update: Wed 05 Nov 2025 10:00:09 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: VL4D1vyRbvnLYsBKH0LiQ6mEhscoy4UWSO6Gqi46Awo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:45:d2:47:3e:9b:41:ae:48:20:90:e7:78:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Nov 4 10:00:09 2025 GMT
Not After : Nov 5 10:00:09 2025 GMT
Subject: CN=baac260e4e74540c0eecf392c61640644e0a135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:70:64:8f:65:e8:8e:38:ab:07:b7:d5:6d:
75:26:ed:49:5d:22:00:9c:e5:0b:5e:a4:ab:28:29:
59:fc:ea:bb:52:34:91:f6:db:c6:a4:90:29:00:7c:
2b:10:1c:78:74:9f:86:ab:4f:17:56:79:a7:66:55:
e2:4b:63:85:c7:5e:47:22:7b:20:7e:eb:56:bc:5d:
3c:60:c7:71:3d:d1:ed:05:28:6b:15:ac:f8:49:f5:
e3:dd:40:10:1c:e1:a0:a0:76:4b:4a:67:b2:ab:af:
e4:4c:2a:c2:3f:71:f6:ed:39:06:92:f5:2f:34:96:
2c:be:70:bb:89:6b:f1:ce:01:b2:ec:c3:95:61:23:
fb:3c:d1:d5:f7:eb:9e:85:a0:f4:da:2a:af:d7:ff:
76:6a:b6:5c:dd:a2:b8:fa:84:ae:07:ed:2b:0f:2e:
d7:3d:71:73:f2:d1:b4:10:c3:10:6d:05:9b:f4:8a:
bb:b4:1f:9b:b0:51:b6:a4:ca:a7:60:25:6d:17:9e:
00:3d:a0:41:b7:2f:aa:18:74:59:76:4e:7a:14:55:
7d:6b:63:79:65:a4:bf:35:e0:45:2e:47:18:59:4e:
d1:d1:b9:07:cd:91:10:16:c5:b9:e0:7a:90:b3:32:
58:91:03:0e:6b:fa:ab:ec:7b:e7:97:b4:c2:80:3e:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:26:0E:4E:74:54:0C:0E:EC:F3:92:C6:16:40:64:4E:0A:13:5F
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:a7:63:9d:28:84:21:a7:dd:95:6d:11:1a:b6:a5:91:37:
89:05:c2:ba:8f:a3:b9:f1:55:e3:cf:07:d3:c4:6d:08:a2:52:
f0:c9:8f:a8:e2:db:a2:13:f6:b2:0a:8c:4a:d4:1e:1b:31:30:
9f:84:55:a9:a3:21:4e:14:51:5d:c6:8c:92:01:69:dc:9f:b7:
f2:51:91:ec:8f:7f:15:d9:49:df:25:a4:b8:92:1c:ed:41:de:
7a:cf:99:c6:f2:e0:9a:be:fd:30:b6:82:21:68:d8:30:fa:4e:
c2:ff:3b:df:1d:cb:13:04:df:f1:96:0c:62:0d:4c:87:0c:b0:
43:59:d5:73:d7:7e:75:46:f2:19:c9:2a:1f:ec:f1:3e:89:da:
df:ca:cd:3a:ae:08:a5:c6:87:4f:42:db:45:73:77:0d:1c:3f:
03:6f:36:02:84:18:90:79:51:69:7a:5c:72:e8:55:e9:93:ff:
1b:20:a0:74:c0:86:d3:fc:02:32:e9:32:59:f1:ab:cf:94:77:
dd:bd:f8:31:50:13:1a:83:a9:85:d0:65:ce:a5:a8:7e:93:c5:
3b:64:dd:af:ea:9b:b9:c2:7e:c4:2a:a7:35:7e:51:3d:29:15:
44:4f:2c:7f:5a:c8:88:e8:42:56:38:a4:17:b1:4f:c2:28:86:
51:ba:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:42 2025 by rpki-client